This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer (raw, json) Hash identifier: vDlcRukPylNXvBFTAvYp18gUmReotxeLwI6i42m56qM= Subject key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF29112ABDBEC00D3174E25EFFF24BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201682 AS: 202521 IP: 87.76.16.0/20 IP: 89.34.16.0/22 IP: 165.84.208.0/20 IP: 176.126.168.0/22 IP: 185.33.100.0/22 IP: 185.67.44.0/22 IP: 185.145.12.0/22 IP: 2a00:cca0::/32 IP: 2a03:2420::/32 IP: 2a07:45c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:91:12:ab:db:ec:00:d3:17:4e:25:ef:ff:24:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:68:86:b7:1f:24:e8:99:ce:fd:1c:29:9c: 96:2d:a8:2a:72:5b:64:b0:94:72:27:1b:24:8b:74: 9e:aa:de:5d:26:82:c5:e5:f2:43:83:51:c5:3f:9c: 4f:24:80:12:c3:9d:6d:09:ee:eb:2a:5d:e3:12:1b: 2d:1c:6e:1e:81:c0:26:a5:50:cd:c6:21:59:1f:b6: 55:52:ab:26:12:e7:8d:9d:2d:b2:a1:50:f2:8e:03: f0:81:31:5a:9b:94:05:7c:ab:93:6d:da:cc:9c:7d: 9a:ac:3a:96:e0:16:92:73:04:6d:80:0c:1d:19:9a: b6:dc:c3:a2:e1:6d:5c:b6:f9:fe:18:d4:c5:e5:2a: 65:2a:0e:75:ed:d6:79:ff:f6:23:d0:99:34:62:01: eb:2b:85:37:1b:8b:d3:8e:73:a9:73:ab:f2:53:50: ae:20:11:e0:18:8c:03:7c:eb:d3:0a:d2:40:da:98: 2d:61:b2:ff:88:fb:c1:07:68:0e:77:8f:93:6d:2e: 56:56:fd:56:db:4a:4f:d7:c1:b6:26:16:94:fa:11: 17:8e:52:79:d0:85:47:8b:f3:47:4c:81:61:61:3f: d2:d7:dc:92:95:83:97:df:f8:3b:14:01:2a:b6:97: 9d:f2:d2:80:1d:c0:6e:02:f7:a5:e4:8d:cc:4f:fb: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.16.0/20 89.34.16.0/22 165.84.208.0/20 176.126.168.0/22 185.33.100.0/22 185.67.44.0/22 185.145.12.0/22 IPv6: 2a00:cca0::/32 2a03:2420::/32 2a07:45c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201682 202521 Signature Algorithm: sha256WithRSAEncryption 81:10:b6:de:32:64:ad:6c:48:50:cd:6f:53:98:af:40:66:d4: 89:12:0c:e7:cd:ae:74:25:d4:95:7f:0a:d2:64:2c:ab:3f:d3: 7c:5c:a3:d5:29:44:21:78:e7:1f:82:70:9e:7b:52:88:3a:46: 27:ea:2f:ae:e7:75:44:85:51:4b:0b:47:50:06:a0:ad:fb:22: c7:0a:25:1a:3e:e1:5d:85:20:bf:0a:bb:fd:2a:82:c5:06:a5: 21:1b:d9:ac:a2:f1:72:96:56:86:8d:2c:2d:b7:01:ff:3c:73: ce:ac:8c:3a:cd:11:6e:1a:59:69:a0:fe:c7:aa:e2:a1:17:dc: 5c:bc:df:ec:ce:a3:3a:c3:58:a9:59:43:d6:5d:15:98:06:a2: 64:2f:ea:11:81:a8:44:a3:6b:24:8b:41:1e:cb:ca:eb:80:f5: b1:48:c3:ef:57:8c:00:e8:30:ea:4f:1c:0a:ba:bf:bd:b3:ef: 0c:2b:ea:ee:b5:bc:1c:fb:10:9c:dd:f0:c6:92:95:29:eb:2b: 70:ff:3c:e5:14:73:3b:e6:d5:47:ea:7f:b9:f5:61:e7:32:01: 9e:75:fe:6a:97:b6:ab:5a:f8:4a:b3:0c:31:7f:96:1c:18:4a: c8:9d:54:64:52:f6:96:d3:fd:70:ba:e4:6b:14:bf:a9:a1:3e: 41:cd:d8:e6 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt/8pESq9vsANMXTiXv/yS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTRhYWMxOTQ4Y2VlMjNkZGY0ZDcxNWY4MDM1MjJmOTNiMGNkZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusxohrcfJOiZzv0cKZyWLagqcltk sJRyJxski3Seqt5dJoLF5fJDg1HFP5xPJIASw51tCe7rKl3jEhstHG4egcAmpVDN xiFZH7ZVUqsmEueNnS2yoVDyjgPwgTFam5QFfKuTbdrMnH2arDqW4BaScwRtgAwd GZq23MOi4W1ctvn+GNTF5SplKg517dZ5//Yj0Jk0YgHrK4U3G4vTjnOpc6vyU1Cu IBHgGIwDfOvTCtJA2pgtYbL/iPvBB2gOd4+TbS5WVv1W20pP18G2JhaU+hEXjlJ5 0IVHi/NHTIFhYT/S19ySlYOX3/g7FAEqtped8tKAHcBuAvel5I3MT/tt3wIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFKpKrBlIzuI9301xX4A1Ivk7DN20MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzA2YjI0 MS02ZGU3LTQ4NWMtOThhZS1mOWJkNjRjYTZlNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMDZiMjQx LTZkZTctNDg1Yy05OGFlLWY5YmQ2NGNhNmU0Yy8xL3FrcXNHVWpPNGozZlRYRmZn RFVpLVRzTTNiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQEV0wQAwQCWSIQAwQEpVTQAwQCsH6oAwQCuSFk AwQCuUMsAwQCuZEMMBsEAgACMBUDBQAqAMygAwUAKgMkIAMFAyoHRcAwHwYIKwYB BQUHAQgBAf8EEDAOoAwwCgIDAxPSAgMDFxkwDQYJKoZIhvcNAQELBQADggEBAIEQ tt4yZK1sSFDNb1OYr0Bm1IkSDOfNrnQl1JV/CtJkLKs/03xco9UpRCF45x+CcJ57 Uog6RifqL67ndUSFUUsLR1AGoK37IscKJRo+4V2FIL8Ku/0qgsUGpSEb2ayi8XKW VoaNLC23Af88c86sjDrNEW4aWWmg/seq4qEX3Fy83+zOozrDWKlZQ9ZdFZgGomQv 6hGBqESjaySLQR7LyuuA9bFIw+9XjADoMOpPHAq6v72z7wwr6u61vBz7EJzd8MaS lSnrK3D/POUUczvm1Ufqf7n1YecyAZ51/mqXtqta+EqzDDF/lhwYSsidVGRS9pbT /XC65GsUv6mhPkHN2OY= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:58 2026 by rpki-client